@code-rag/core 0.1.0

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 CodeRAG Contributors
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.md

@@ -0,0 +1,19 @@
+# @code-rag/core
+
+Core library for CodeRAG -- intelligent codebase context engine for AI coding agents.
+
+Includes ingestion pipeline (Tree-sitter AST), embedding providers, vector storage (LanceDB), hybrid search (semantic + BM25), dependency graph, and context assembly.
+
+## Installation
+
+```bash
+npm install @code-rag/core
+```
+
+## Documentation
+
+See the [main repository](https://dev.azure.com/momc-pl/CodeRAG/_git/CodeRAG) for full documentation.
+
+## License
+
+MIT

package/dist/auth/audit-log.d.ts

@@ -0,0 +1,35 @@
+import type { AuditEntry, AuditQuery } from './types.js';
+/**
+ * Records and queries audit entries for who-searched-what-when tracking.
+ *
+ * Entries are stored in-memory for fast access.  When `filePath` is provided,
+ * entries are also **appended** to a JSON-lines (.jsonl) file for persistence
+ * across restarts.
+ */
+export declare class AuditLogger {
+    private readonly entries;
+    private readonly filePath;
+    constructor(filePath?: string);
+    /**
+     * Records an audit entry.  Appends to the in-memory list and, if configured,
+     * to the on-disk JSON-lines file.
+     */
+    log(entry: AuditEntry): void;
+    /**
+     * Searches audit entries matching the given filters.  Returns results in
+     * reverse-chronological order (newest first).
+     */
+    query(filters: AuditQuery): readonly AuditEntry[];
+    /**
+     * Returns audit entries for a specific user, newest first.
+     */
+    getByUser(userId: string, limit?: number): readonly AuditEntry[];
+    /**
+     * Returns audit entries for a specific action, newest first.
+     */
+    getByAction(action: string, limit?: number): readonly AuditEntry[];
+    /**
+     * Returns the total number of entries in the log.
+     */
+    get size(): number;
+}

package/dist/auth/audit-log.js

@@ -0,0 +1,110 @@
+import { readFileSync, appendFileSync, existsSync, mkdirSync } from 'node:fs';
+import { dirname } from 'node:path';
+// ---------------------------------------------------------------------------
+// AuditLogger
+// ---------------------------------------------------------------------------
+/**
+ * Records and queries audit entries for who-searched-what-when tracking.
+ *
+ * Entries are stored in-memory for fast access.  When `filePath` is provided,
+ * entries are also **appended** to a JSON-lines (.jsonl) file for persistence
+ * across restarts.
+ */
+export class AuditLogger {
+    entries = [];
+    filePath;
+    constructor(filePath) {
+        this.filePath = filePath;
+        // Load existing entries from file on startup
+        if (filePath && existsSync(filePath)) {
+            try {
+                const raw = readFileSync(filePath, 'utf-8');
+                const lines = raw.split('\n').filter(Boolean);
+                for (const line of lines) {
+                    const parsed = JSON.parse(line);
+                    this.entries.push({
+                        ...parsed,
+                        timestamp: new Date(parsed.timestamp),
+                    });
+                }
+            }
+            catch {
+                // If file is corrupt we start fresh in-memory
+            }
+        }
+    }
+    // -----------------------------------------------------------------------
+    // Write
+    // -----------------------------------------------------------------------
+    /**
+     * Records an audit entry.  Appends to the in-memory list and, if configured,
+     * to the on-disk JSON-lines file.
+     */
+    log(entry) {
+        this.entries.push(entry);
+        if (this.filePath) {
+            try {
+                const dir = dirname(this.filePath);
+                if (!existsSync(dir)) {
+                    mkdirSync(dir, { recursive: true });
+                }
+                const line = JSON.stringify({
+                    ...entry,
+                    timestamp: entry.timestamp.toISOString(),
+                });
+                appendFileSync(this.filePath, line + '\n');
+            }
+            catch {
+                // Swallow I/O errors — audit should not break the main flow
+            }
+        }
+    }
+    // -----------------------------------------------------------------------
+    // Query
+    // -----------------------------------------------------------------------
+    /**
+     * Searches audit entries matching the given filters.  Returns results in
+     * reverse-chronological order (newest first).
+     */
+    query(filters) {
+        let results = [...this.entries];
+        if (filters.userId) {
+            results = results.filter((e) => e.userId === filters.userId);
+        }
+        if (filters.action) {
+            results = results.filter((e) => e.action === filters.action);
+        }
+        if (filters.startDate) {
+            const start = filters.startDate;
+            results = results.filter((e) => e.timestamp >= start);
+        }
+        if (filters.endDate) {
+            const end = filters.endDate;
+            results = results.filter((e) => e.timestamp <= end);
+        }
+        // Newest first
+        results.sort((a, b) => b.timestamp.getTime() - a.timestamp.getTime());
+        if (filters.limit !== undefined && filters.limit > 0) {
+            results = results.slice(0, filters.limit);
+        }
+        return results;
+    }
+    /**
+     * Returns audit entries for a specific user, newest first.
+     */
+    getByUser(userId, limit) {
+        return this.query({ userId, limit });
+    }
+    /**
+     * Returns audit entries for a specific action, newest first.
+     */
+    getByAction(action, limit) {
+        return this.query({ action, limit });
+    }
+    /**
+     * Returns the total number of entries in the log.
+     */
+    get size() {
+        return this.entries.length;
+    }
+}

package/dist/auth/audit-log.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"audit-log.js","sourceRoot":"","sources":["../../src/auth/audit-log.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,cAAc,EAAE,UAAU,EAAE,SAAS,EAAE,MAAM,SAAS,CAAC;AAC9E,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAGpC,8EAA8E;AAC9E,cAAc;AACd,8EAA8E;AAE9E;;;;;;GAMG;AACH,MAAM,OAAO,WAAW;IACL,OAAO,GAAiB,EAAE,CAAC;IAC3B,QAAQ,CAAqB;IAE9C,YAAY,QAAiB;QAC3B,IAAI,CAAC,QAAQ,GAAG,QAAQ,CAAC;QAEzB,6CAA6C;QAC7C,IAAI,QAAQ,IAAI,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;YACrC,IAAI,CAAC;gBACH,MAAM,GAAG,GAAG,YAAY,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;gBAC5C,MAAM,KAAK,GAAG,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;gBAC9C,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;oBACzB,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAO7B,CAAC;oBACF,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC;wBAChB,GAAG,MAAM;wBACT,SAAS,EAAE,IAAI,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC;qBACtC,CAAC,CAAC;gBACL,CAAC;YACH,CAAC;YAAC,MAAM,CAAC;gBACP,8CAA8C;YAChD,CAAC;QACH,CAAC;IACH,CAAC;IAED,0EAA0E;IAC1E,QAAQ;IACR,0EAA0E;IAE1E;;;OAGG;IACH,GAAG,CAAC,KAAiB;QACnB,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAEzB,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;YAClB,IAAI,CAAC;gBACH,MAAM,GAAG,GAAG,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;gBACnC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;oBACrB,SAAS,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;gBACtC,CAAC;gBACD,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC;oBAC1B,GAAG,KAAK;oBACR,SAAS,EAAE,KAAK,CAAC,SAAS,CAAC,WAAW,EAAE;iBACzC,CAAC,CAAC;gBACH,cAAc,CAAC,IAAI,CAAC,QAAQ,EAAE,IAAI,GAAG,IAAI,CAAC,CAAC;YAC7C,CAAC;YAAC,MAAM,CAAC;gBACP,4DAA4D;YAC9D,CAAC;QACH,CAAC;IACH,CAAC;IAED,0EAA0E;IAC1E,QAAQ;IACR,0EAA0E;IAE1E;;;OAGG;IACH,KAAK,CAAC,OAAmB;QACvB,IAAI,OAAO,GAAG,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC,CAAC;QAEhC,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC;YACnB,OAAO,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,OAAO,CAAC,MAAM,CAAC,CAAC;QAC/D,CAAC;QAED,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC;YACnB,OAAO,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,OAAO,CAAC,MAAM,CAAC,CAAC;QAC/D,CAAC;QAED,IAAI,OAAO,CAAC,SAAS,EAAE,CAAC;YACtB,MAAM,KAAK,GAAG,OAAO,CAAC,SAAS,CAAC;YAChC,OAAO,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,IAAI,KAAK,CAAC,CAAC;QACxD,CAAC;QAED,IAAI,OAAO,CAAC,OAAO,EAAE,CAAC;YACpB,MAAM,GAAG,GAAG,OAAO,CAAC,OAAO,CAAC;YAC5B,OAAO,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,IAAI,GAAG,CAAC,CAAC;QACtD,CAAC;QAED,eAAe;QACf,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC,SAAS,CAAC,OAAO,EAAE,CAAC,CAAC;QAEtE,IAAI,OAAO,CAAC,KAAK,KAAK,SAAS,IAAI,OAAO,CAAC,KAAK,GAAG,CAAC,EAAE,CAAC;YACrD,OAAO,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,OAAO,CAAC,KAAK,CAAC,CAAC;QAC5C,CAAC;QAED,OAAO,OAAO,CAAC;IACjB,CAAC;IAED;;OAEG;IACH,SAAS,CAAC,MAAc,EAAE,KAAc;QACtC,OAAO,IAAI,CAAC,KAAK,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC;IACvC,CAAC;IAED;;OAEG;IACH,WAAW,CAAC,MAAc,EAAE,KAAc;QACxC,OAAO,IAAI,CAAC,KAAK,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC;IACvC,CAAC;IAED;;OAEG;IACH,IAAI,IAAI;QACN,OAAO,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC;IAC7B,CAAC;CACF"}

package/dist/auth/audit-log.test.d.ts

@@ -0,0 +1 @@
+export {};

package/dist/auth/audit-log.test.js

@@ -0,0 +1,261 @@
+import { describe, it, expect, beforeEach, afterEach } from 'vitest';
+import { mkdtempSync, rmSync, readFileSync, existsSync } from 'node:fs';
+import { join } from 'node:path';
+import { tmpdir } from 'node:os';
+import { AuditLogger } from './audit-log.js';
+// ---------------------------------------------------------------------------
+// Helpers
+// ---------------------------------------------------------------------------
+function createEntry(overrides) {
+    return {
+        timestamp: new Date('2026-02-22T10:00:00Z'),
+        userId: 'user-1',
+        action: 'search',
+        resource: 'repo-a',
+        details: 'searched for authentication module',
+        ip: '10.0.0.1',
+        ...overrides,
+    };
+}
+// ---------------------------------------------------------------------------
+// Tests
+// ---------------------------------------------------------------------------
+describe('AuditLogger', () => {
+    // -----------------------------------------------------------------------
+    // In-memory mode
+    // -----------------------------------------------------------------------
+    describe('in-memory mode', () => {
+        it('should start with zero entries', () => {
+            const logger = new AuditLogger();
+            expect(logger.size).toBe(0);
+        });
+        it('should log an entry', () => {
+            const logger = new AuditLogger();
+            logger.log(createEntry());
+            expect(logger.size).toBe(1);
+        });
+        it('should log multiple entries', () => {
+            const logger = new AuditLogger();
+            logger.log(createEntry({ userId: 'u1' }));
+            logger.log(createEntry({ userId: 'u2' }));
+            logger.log(createEntry({ userId: 'u3' }));
+            expect(logger.size).toBe(3);
+        });
+    });
+    // -----------------------------------------------------------------------
+    // query
+    // -----------------------------------------------------------------------
+    describe('query', () => {
+        let logger;
+        beforeEach(() => {
+            logger = new AuditLogger();
+            logger.log(createEntry({
+                timestamp: new Date('2026-02-22T09:00:00Z'),
+                userId: 'user-1',
+                action: 'search',
+            }));
+            logger.log(createEntry({
+                timestamp: new Date('2026-02-22T10:00:00Z'),
+                userId: 'user-2',
+                action: 'index',
+            }));
+            logger.log(createEntry({
+                timestamp: new Date('2026-02-22T11:00:00Z'),
+                userId: 'user-1',
+                action: 'configure',
+            }));
+            logger.log(createEntry({
+                timestamp: new Date('2026-02-22T12:00:00Z'),
+                userId: 'user-3',
+                action: 'search',
+            }));
+        });
+        it('should return all entries when no filters are specified', () => {
+            const results = logger.query({});
+            expect(results).toHaveLength(4);
+        });
+        it('should return entries in reverse-chronological order', () => {
+            const results = logger.query({});
+            for (let i = 0; i < results.length - 1; i++) {
+                expect(results[i].timestamp.getTime()).toBeGreaterThanOrEqual(results[i + 1].timestamp.getTime());
+            }
+        });
+        it('should filter by userId', () => {
+            const results = logger.query({ userId: 'user-1' });
+            expect(results).toHaveLength(2);
+            expect(results.every((e) => e.userId === 'user-1')).toBe(true);
+        });
+        it('should filter by action', () => {
+            const results = logger.query({ action: 'search' });
+            expect(results).toHaveLength(2);
+            expect(results.every((e) => e.action === 'search')).toBe(true);
+        });
+        it('should filter by startDate', () => {
+            const results = logger.query({
+                startDate: new Date('2026-02-22T10:30:00Z'),
+            });
+            expect(results).toHaveLength(2);
+        });
+        it('should filter by endDate', () => {
+            const results = logger.query({
+                endDate: new Date('2026-02-22T10:30:00Z'),
+            });
+            expect(results).toHaveLength(2);
+        });
+        it('should filter by date range', () => {
+            const results = logger.query({
+                startDate: new Date('2026-02-22T09:30:00Z'),
+                endDate: new Date('2026-02-22T11:30:00Z'),
+            });
+            expect(results).toHaveLength(2);
+        });
+        it('should respect the limit parameter', () => {
+            const results = logger.query({ limit: 2 });
+            expect(results).toHaveLength(2);
+        });
+        it('should combine filters', () => {
+            const results = logger.query({
+                userId: 'user-1',
+                action: 'search',
+            });
+            expect(results).toHaveLength(1);
+            expect(results[0].userId).toBe('user-1');
+            expect(results[0].action).toBe('search');
+        });
+        it('should return empty array when no entries match', () => {
+            const results = logger.query({ userId: 'nonexistent' });
+            expect(results).toHaveLength(0);
+        });
+    });
+    // -----------------------------------------------------------------------
+    // getByUser
+    // -----------------------------------------------------------------------
+    describe('getByUser', () => {
+        it('should return entries for a specific user', () => {
+            const logger = new AuditLogger();
+            logger.log(createEntry({ userId: 'alice' }));
+            logger.log(createEntry({ userId: 'bob' }));
+            logger.log(createEntry({ userId: 'alice' }));
+            const results = logger.getByUser('alice');
+            expect(results).toHaveLength(2);
+            expect(results.every((e) => e.userId === 'alice')).toBe(true);
+        });
+        it('should respect the limit parameter', () => {
+            const logger = new AuditLogger();
+            for (let i = 0; i < 10; i++) {
+                logger.log(createEntry({ userId: 'alice' }));
+            }
+            const results = logger.getByUser('alice', 3);
+            expect(results).toHaveLength(3);
+        });
+    });
+    // -----------------------------------------------------------------------
+    // getByAction
+    // -----------------------------------------------------------------------
+    describe('getByAction', () => {
+        it('should return entries for a specific action', () => {
+            const logger = new AuditLogger();
+            logger.log(createEntry({ action: 'search' }));
+            logger.log(createEntry({ action: 'index' }));
+            logger.log(createEntry({ action: 'search' }));
+            const results = logger.getByAction('search');
+            expect(results).toHaveLength(2);
+            expect(results.every((e) => e.action === 'search')).toBe(true);
+        });
+        it('should respect the limit parameter', () => {
+            const logger = new AuditLogger();
+            for (let i = 0; i < 10; i++) {
+                logger.log(createEntry({ action: 'search' }));
+            }
+            const results = logger.getByAction('search', 5);
+            expect(results).toHaveLength(5);
+        });
+    });
+    // -----------------------------------------------------------------------
+    // File persistence
+    // -----------------------------------------------------------------------
+    describe('file persistence', () => {
+        let tempDir;
+        beforeEach(() => {
+            tempDir = mkdtempSync(join(tmpdir(), 'coderag-audit-test-'));
+        });
+        afterEach(() => {
+            rmSync(tempDir, { recursive: true, force: true });
+        });
+        it('should write entries to a JSON-lines file', () => {
+            const filePath = join(tempDir, 'audit.jsonl');
+            const logger = new AuditLogger(filePath);
+            logger.log(createEntry({ userId: 'alice', action: 'search' }));
+            logger.log(createEntry({ userId: 'bob', action: 'index' }));
+            expect(existsSync(filePath)).toBe(true);
+            const content = readFileSync(filePath, 'utf-8');
+            const lines = content.trim().split('\n');
+            expect(lines).toHaveLength(2);
+            const parsed0 = JSON.parse(lines[0]);
+            expect(parsed0['userId']).toBe('alice');
+            const parsed1 = JSON.parse(lines[1]);
+            expect(parsed1['userId']).toBe('bob');
+        });
+        it('should load existing entries from file on construction', () => {
+            const filePath = join(tempDir, 'audit.jsonl');
+            // Create initial logger and write entries
+            const logger1 = new AuditLogger(filePath);
+            logger1.log(createEntry({ userId: 'alice' }));
+            logger1.log(createEntry({ userId: 'bob' }));
+            // Create new logger that should load from file
+            const logger2 = new AuditLogger(filePath);
+            expect(logger2.size).toBe(2);
+            const results = logger2.getByUser('alice');
+            expect(results).toHaveLength(1);
+        });
+        it('should append to existing file', () => {
+            const filePath = join(tempDir, 'audit.jsonl');
+            const logger1 = new AuditLogger(filePath);
+            logger1.log(createEntry({ userId: 'alice' }));
+            const logger2 = new AuditLogger(filePath);
+            logger2.log(createEntry({ userId: 'bob' }));
+            const content = readFileSync(filePath, 'utf-8');
+            const lines = content.trim().split('\n');
+            // logger1 wrote 1 line, logger2 appended 1 more line
+            expect(lines).toHaveLength(2);
+            // logger2 should have both in-memory (loaded + new)
+            expect(logger2.size).toBe(2);
+        });
+        it('should create parent directories if they do not exist', () => {
+            const filePath = join(tempDir, 'nested', 'deep', 'audit.jsonl');
+            const logger = new AuditLogger(filePath);
+            logger.log(createEntry());
+            expect(existsSync(filePath)).toBe(true);
+        });
+        it('should handle corrupt file gracefully', () => {
+            const filePath = join(tempDir, 'corrupt.jsonl');
+            // Write corrupt data
+            const { writeFileSync } = require('node:fs');
+            writeFileSync(filePath, 'not valid json\n{broken\n');
+            // Should not throw, starts fresh in-memory
+            const logger = new AuditLogger(filePath);
+            expect(logger.size).toBe(0);
+        });
+        it('should serialize timestamp as ISO string', () => {
+            const filePath = join(tempDir, 'audit.jsonl');
+            const logger = new AuditLogger(filePath);
+            const timestamp = new Date('2026-02-22T15:30:00Z');
+            logger.log(createEntry({ timestamp }));
+            const content = readFileSync(filePath, 'utf-8');
+            const parsed = JSON.parse(content.trim());
+            expect(parsed['timestamp']).toBe('2026-02-22T15:30:00.000Z');
+        });
+        it('should deserialize timestamp back to Date on load', () => {
+            const filePath = join(tempDir, 'audit.jsonl');
+            const timestamp = new Date('2026-02-22T15:30:00Z');
+            const logger1 = new AuditLogger(filePath);
+            logger1.log(createEntry({ timestamp }));
+            const logger2 = new AuditLogger(filePath);
+            const results = logger2.query({});
+            expect(results).toHaveLength(1);
+            expect(results[0].timestamp).toBeInstanceOf(Date);
+            expect(results[0].timestamp.toISOString()).toBe('2026-02-22T15:30:00.000Z');
+        });
+    });
+});
+//# sourceMappingURL=audit-log.test.js.map

package/dist/auth/audit-log.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"audit-log.test.js","sourceRoot":"","sources":["../../src/auth/audit-log.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,UAAU,EAAE,SAAS,EAAE,MAAM,QAAQ,CAAC;AACrE,OAAO,EAAE,WAAW,EAAE,MAAM,EAAE,YAAY,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AACxE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AACjC,OAAO,EAAE,WAAW,EAAE,MAAM,gBAAgB,CAAC;AAG7C,8EAA8E;AAC9E,UAAU;AACV,8EAA8E;AAE9E,SAAS,WAAW,CAAC,SAA+B;IAClD,OAAO;QACL,SAAS,EAAE,IAAI,IAAI,CAAC,sBAAsB,CAAC;QAC3C,MAAM,EAAE,QAAQ;QAChB,MAAM,EAAE,QAAQ;QAChB,QAAQ,EAAE,QAAQ;QAClB,OAAO,EAAE,oCAAoC;QAC7C,EAAE,EAAE,UAAU;QACd,GAAG,SAAS;KACb,CAAC;AACJ,CAAC;AAED,8EAA8E;AAC9E,QAAQ;AACR,8EAA8E;AAE9E,QAAQ,CAAC,aAAa,EAAE,GAAG,EAAE;IAC3B,0EAA0E;IAC1E,iBAAiB;IACjB,0EAA0E;IAE1E,QAAQ,CAAC,gBAAgB,EAAE,GAAG,EAAE;QAC9B,EAAE,CAAC,gCAAgC,EAAE,GAAG,EAAE;YACxC,MAAM,MAAM,GAAG,IAAI,WAAW,EAAE,CAAC;YACjC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAC9B,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,qBAAqB,EAAE,GAAG,EAAE;YAC7B,MAAM,MAAM,GAAG,IAAI,WAAW,EAAE,CAAC;YACjC,MAAM,CAAC,GAAG,CAAC,WAAW,EAAE,CAAC,CAAC;YAC1B,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAC9B,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,6BAA6B,EAAE,GAAG,EAAE;YACrC,MAAM,MAAM,GAAG,IAAI,WAAW,EAAE,CAAC;YACjC,MAAM,CAAC,GAAG,CAAC,WAAW,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;YAC1C,MAAM,CAAC,GAAG,CAAC,WAAW,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;YAC1C,MAAM,CAAC,GAAG,CAAC,WAAW,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;YAC1C,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAC9B,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,0EAA0E;IAC1E,QAAQ;IACR,0EAA0E;IAE1E,QAAQ,CAAC,OAAO,EAAE,GAAG,EAAE;QACrB,IAAI,MAAmB,CAAC;QAExB,UAAU,CAAC,GAAG,EAAE;YACd,MAAM,GAAG,IAAI,WAAW,EAAE,CAAC;YAC3B,MAAM,CAAC,GAAG,CAAC,WAAW,CAAC;gBACrB,SAAS,EAAE,IAAI,IAAI,CAAC,sBAAsB,CAAC;gBAC3C,MAAM,EAAE,QAAQ;gBAChB,MAAM,EAAE,QAAQ;aACjB,CAAC,CAAC,CAAC;YACJ,MAAM,CAAC,GAAG,CAAC,WAAW,CAAC;gBACrB,SAAS,EAAE,IAAI,IAAI,CAAC,sBAAsB,CAAC;gBAC3C,MAAM,EAAE,QAAQ;gBAChB,MAAM,EAAE,OAAO;aAChB,CAAC,CAAC,CAAC;YACJ,MAAM,CAAC,GAAG,CAAC,WAAW,CAAC;gBACrB,SAAS,EAAE,IAAI,IAAI,CAAC,sBAAsB,CAAC;gBAC3C,MAAM,EAAE,QAAQ;gBAChB,MAAM,EAAE,WAAW;aACpB,CAAC,CAAC,CAAC;YACJ,MAAM,CAAC,GAAG,CAAC,WAAW,CAAC;gBACrB,SAAS,EAAE,IAAI,IAAI,CAAC,sBAAsB,CAAC;gBAC3C,MAAM,EAAE,QAAQ;gBAChB,MAAM,EAAE,QAAQ;aACjB,CAAC,CAAC,CAAC;QACN,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,yDAAyD,EAAE,GAAG,EAAE;YACjE,MAAM,OAAO,GAAG,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;YACjC,MAAM,CAAC,OAAO,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;QAClC,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,sDAAsD,EAAE,GAAG,EAAE;YAC9D,MAAM,OAAO,GAAG,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;YACjC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;gBAC5C,MAAM,CAAC,OAAO,CAAC,CAAC,CAAE,CAAC,SAAS,CAAC,OAAO,EAAE,CAAC,CAAC,sBAAsB,CAC5D,OAAO,CAAC,CAAC,GAAG,CAAC,CAAE,CAAC,SAAS,CAAC,OAAO,EAAE,CACpC,CAAC;YACJ,CAAC;QACH,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,yBAAyB,EAAE,GAAG,EAAE;YACjC,MAAM,OAAO,GAAG,MAAM,CAAC,KAAK,CAAC,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC,CAAC;YACnD,MAAM,CAAC,OAAO,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;YAChC,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACjE,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,yBAAyB,EAAE,GAAG,EAAE;YACjC,MAAM,OAAO,GAAG,MAAM,CAAC,KAAK,CAAC,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC,CAAC;YACnD,MAAM,CAAC,OAAO,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;YAChC,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACjE,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,4BAA4B,EAAE,GAAG,EAAE;YACpC,MAAM,OAAO,GAAG,MAAM,CAAC,KAAK,CAAC;gBAC3B,SAAS,EAAE,IAAI,IAAI,CAAC,sBAAsB,CAAC;aAC5C,CAAC,CAAC;YACH,MAAM,CAAC,OAAO,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;QAClC,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,0BAA0B,EAAE,GAAG,EAAE;YAClC,MAAM,OAAO,GAAG,MAAM,CAAC,KAAK,CAAC;gBAC3B,OAAO,EAAE,IAAI,IAAI,CAAC,sBAAsB,CAAC;aAC1C,CAAC,CAAC;YACH,MAAM,CAAC,OAAO,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;QAClC,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,6BAA6B,EAAE,GAAG,EAAE;YACrC,MAAM,OAAO,GAAG,MAAM,CAAC,KAAK,CAAC;gBAC3B,SAAS,EAAE,IAAI,IAAI,CAAC,sBAAsB,CAAC;gBAC3C,OAAO,EAAE,IAAI,IAAI,CAAC,sBAAsB,CAAC;aAC1C,CAAC,CAAC;YACH,MAAM,CAAC,OAAO,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;QAClC,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,oCAAoC,EAAE,GAAG,EAAE;YAC5C,MAAM,OAAO,GAAG,MAAM,CAAC,KAAK,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC,CAAC;YAC3C,MAAM,CAAC,OAAO,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;QAClC,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,wBAAwB,EAAE,GAAG,EAAE;YAChC,MAAM,OAAO,GAAG,MAAM,CAAC,KAAK,CAAC;gBAC3B,MAAM,EAAE,QAAQ;gBAChB,MAAM,EAAE,QAAQ;aACjB,CAAC,CAAC;YACH,MAAM,CAAC,OAAO,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;YAChC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAE,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;YAC1C,MAAM,CAAC,OAAO,CAAC,CAAC,CAAE,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QAC5C,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,iDAAiD,EAAE,GAAG,EAAE;YACzD,MAAM,OAAO,GAAG,MAAM,CAAC,KAAK,CAAC,EAAE,MAAM,EAAE,aAAa,EAAE,CAAC,CAAC;YACxD,MAAM,CAAC,OAAO,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;QAClC,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,0EAA0E;IAC1E,YAAY;IACZ,0EAA0E;IAE1E,QAAQ,CAAC,WAAW,EAAE,GAAG,EAAE;QACzB,EAAE,CAAC,2CAA2C,EAAE,GAAG,EAAE;YACnD,MAAM,MAAM,GAAG,IAAI,WAAW,EAAE,CAAC;YACjC,MAAM,CAAC,GAAG,CAAC,WAAW,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC;YAC7C,MAAM,CAAC,GAAG,CAAC,WAAW,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC;YAC3C,MAAM,CAAC,GAAG,CAAC,WAAW,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC;YAE7C,MAAM,OAAO,GAAG,MAAM,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;YAC1C,MAAM,CAAC,OAAO,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;YAChC,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAChE,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,oCAAoC,EAAE,GAAG,EAAE;YAC5C,MAAM,MAAM,GAAG,IAAI,WAAW,EAAE,CAAC;YACjC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC;gBAC5B,MAAM,CAAC,GAAG,CAAC,WAAW,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC;YAC/C,CAAC;YAED,MAAM,OAAO,GAAG,MAAM,CAAC,SAAS,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;YAC7C,MAAM,CAAC,OAAO,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;QAClC,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,0EAA0E;IAC1E,cAAc;IACd,0EAA0E;IAE1E,QAAQ,CAAC,aAAa,EAAE,GAAG,EAAE;QAC3B,EAAE,CAAC,6CAA6C,EAAE,GAAG,EAAE;YACrD,MAAM,MAAM,GAAG,IAAI,WAAW,EAAE,CAAC;YACjC,MAAM,CAAC,GAAG,CAAC,WAAW,CAAC,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC;YAC9C,MAAM,CAAC,GAAG,CAAC,WAAW,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC;YAC7C,MAAM,CAAC,GAAG,CAAC,WAAW,CAAC,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC;YAE9C,MAAM,OAAO,GAAG,MAAM,CAAC,WAAW,CAAC,QAAQ,CAAC,CAAC;YAC7C,MAAM,CAAC,OAAO,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;YAChC,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACjE,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,oCAAoC,EAAE,GAAG,EAAE;YAC5C,MAAM,MAAM,GAAG,IAAI,WAAW,EAAE,CAAC;YACjC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC;gBAC5B,MAAM,CAAC,GAAG,CAAC,WAAW,CAAC,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC;YAChD,CAAC;YAED,MAAM,OAAO,GAAG,MAAM,CAAC,WAAW,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC;YAChD,MAAM,CAAC,OAAO,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;QAClC,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,0EAA0E;IAC1E,mBAAmB;IACnB,0EAA0E;IAE1E,QAAQ,CAAC,kBAAkB,EAAE,GAAG,EAAE;QAChC,IAAI,OAAe,CAAC;QAEpB,UAAU,CAAC,GAAG,EAAE;YACd,OAAO,GAAG,WAAW,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,qBAAqB,CAAC,CAAC,CAAC;QAC/D,CAAC,CAAC,CAAC;QAEH,SAAS,CAAC,GAAG,EAAE;YACb,MAAM,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QACpD,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,2CAA2C,EAAE,GAAG,EAAE;YACnD,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,EAAE,aAAa,CAAC,CAAC;YAC9C,MAAM,MAAM,GAAG,IAAI,WAAW,CAAC,QAAQ,CAAC,CAAC;YACzC,MAAM,CAAC,GAAG,CAAC,WAAW,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC;YAC/D,MAAM,CAAC,GAAG,CAAC,WAAW,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC;YAE5D,MAAM,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACxC,MAAM,OAAO,GAAG,YAAY,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;YAChD,MAAM,KAAK,GAAG,OAAO,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;YACzC,MAAM,CAAC,KAAK,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;YAE9B,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAE,CAA4B,CAAC;YACjE,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;YACxC,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAE,CAA4B,CAAC;YACjE,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACxC,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,wDAAwD,EAAE,GAAG,EAAE;YAChE,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,EAAE,aAAa,CAAC,CAAC;YAE9C,0CAA0C;YAC1C,MAAM,OAAO,GAAG,IAAI,WAAW,CAAC,QAAQ,CAAC,CAAC;YAC1C,OAAO,CAAC,GAAG,CAAC,WAAW,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC;YAC9C,OAAO,CAAC,GAAG,CAAC,WAAW,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC;YAE5C,+CAA+C;YAC/C,MAAM,OAAO,GAAG,IAAI,WAAW,CAAC,QAAQ,CAAC,CAAC;YAC1C,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YAE7B,MAAM,OAAO,GAAG,OAAO,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;YAC3C,MAAM,CAAC,OAAO,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;QAClC,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,gCAAgC,EAAE,GAAG,EAAE;YACxC,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,EAAE,aAAa,CAAC,CAAC;YAE9C,MAAM,OAAO,GAAG,IAAI,WAAW,CAAC,QAAQ,CAAC,CAAC;YAC1C,OAAO,CAAC,GAAG,CAAC,WAAW,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC;YAE9C,MAAM,OAAO,GAAG,IAAI,WAAW,CAAC,QAAQ,CAAC,CAAC;YAC1C,OAAO,CAAC,GAAG,CAAC,WAAW,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC;YAE5C,MAAM,OAAO,GAAG,YAAY,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;YAChD,MAAM,KAAK,GAAG,OAAO,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;YACzC,qDAAqD;YACrD,MAAM,CAAC,KAAK,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;YAE9B,oDAAoD;YACpD,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAC/B,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,uDAAuD,EAAE,GAAG,EAAE;YAC/D,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,aAAa,CAAC,CAAC;YAChE,MAAM,MAAM,GAAG,IAAI,WAAW,CAAC,QAAQ,CAAC,CAAC;YACzC,MAAM,CAAC,GAAG,CAAC,WAAW,EAAE,CAAC,CAAC;YAE1B,MAAM,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC1C,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,uCAAuC,EAAE,GAAG,EAAE;YAC/C,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,EAAE,eAAe,CAAC,CAAC;YAChD,qBAAqB;YACrB,MAAM,EAAE,aAAa,EAAE,GAAG,OAAO,CAAC,SAAS,CAA6B,CAAC;YACzE,aAAa,CAAC,QAAQ,EAAE,2BAA2B,CAAC,CAAC;YAErD,2CAA2C;YAC3C,MAAM,MAAM,GAAG,IAAI,WAAW,CAAC,QAAQ,CAAC,CAAC;YACzC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAC9B,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,0CAA0C,EAAE,GAAG,EAAE;YAClD,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,EAAE,aAAa,CAAC,CAAC;YAC9C,MAAM,MAAM,GAAG,IAAI,WAAW,CAAC,QAAQ,CAAC,CAAC;YACzC,MAAM,SAAS,GAAG,IAAI,IAAI,CAAC,sBAAsB,CAAC,CAAC;YACnD,MAAM,CAAC,GAAG,CAAC,WAAW,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC;YAEvC,MAAM,OAAO,GAAG,YAAY,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;YAChD,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,EAAE,CAA4B,CAAC;YACrE,MAAM,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC,CAAC,IAAI,CAAC,0BAA0B,CAAC,CAAC;QAC/D,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,mDAAmD,EAAE,GAAG,EAAE;YAC3D,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,EAAE,aAAa,CAAC,CAAC;YAC9C,MAAM,SAAS,GAAG,IAAI,IAAI,CAAC,sBAAsB,CAAC,CAAC;YAEnD,MAAM,OAAO,GAAG,IAAI,WAAW,CAAC,QAAQ,CAAC,CAAC;YAC1C,OAAO,CAAC,GAAG,CAAC,WAAW,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC;YAExC,MAAM,OAAO,GAAG,IAAI,WAAW,CAAC,QAAQ,CAAC,CAAC;YAC1C,MAAM,OAAO,GAAG,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;YAClC,MAAM,CAAC,OAAO,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;YAChC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAE,CAAC,SAAS,CAAC,CAAC,cAAc,CAAC,IAAI,CAAC,CAAC;YACnD,MAAM,CAAC,OAAO,CAAC,CAAC,CAAE,CAAC,SAAS,CAAC,WAAW,EAAE,CAAC,CAAC,IAAI,CAAC,0BAA0B,CAAC,CAAC;QAC/E,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/auth/index.d.ts

@@ -0,0 +1,6 @@
+export type { Role, Action, RepoAccessLevel, RepoPermission, User, AuthToken, AuditEntry, AuditQuery, AuthProvider, OIDCConfig, OIDCDiscoveryDocument, SAMLConfig, SAMLIdPMetadata, } from './types.js';
+export { ROLE_HIERARCHY, AuthError } from './types.js';
+export { RBACManager } from './rbac.js';
+export { OIDCProvider } from './oidc-provider.js';
+export { SAMLProvider } from './saml-provider.js';
+export { AuditLogger } from './audit-log.js';

package/dist/auth/index.js

@@ -0,0 +1,5 @@
+export { ROLE_HIERARCHY, AuthError } from './types.js';
+export { RBACManager } from './rbac.js';
+export { OIDCProvider } from './oidc-provider.js';
+export { SAMLProvider } from './saml-provider.js';
+export { AuditLogger } from './audit-log.js';

package/dist/auth/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/auth/index.ts"],"names":[],"mappings":"AAeA,OAAO,EAAE,cAAc,EAAE,SAAS,EAAE,MAAM,YAAY,CAAC;AAEvD,OAAO,EAAE,WAAW,EAAE,MAAM,WAAW,CAAC;AACxC,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAClD,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAClD,OAAO,EAAE,WAAW,EAAE,MAAM,gBAAgB,CAAC"}

package/dist/auth/oidc-provider.d.ts

@@ -0,0 +1,49 @@
+import { type Result } from 'neverthrow';
+import type { AuthProvider, AuthToken, OIDCConfig, Role, User } from './types.js';
+import { AuthError } from './types.js';
+/**
+ * OIDC-based `AuthProvider` that validates JWT access/id-tokens using the
+ * provider's published JWKS.
+ *
+ * Supports Azure AD, Okta, Google Workspace and any standards-compliant
+ * OpenID Connect provider.
+ */
+export declare class OIDCProvider implements AuthProvider {
+    readonly name = "oidc";
+    private readonly config;
+    private discovery;
+    private jwks;
+    /** Users whose info has been fetched (in-memory cache). */
+    private readonly userCache;
+    /**
+     * Pluggable `fetch` function — defaults to the global `fetch`.  Tests can
+     * inject a stub without monkey-patching globals.
+     */
+    private readonly fetchFn;
+    constructor(config: OIDCConfig, fetchFn?: typeof fetch);
+    /**
+     * Discovers OIDC endpoints from `.well-known/openid-configuration` and
+     * fetches the JWKS.
+     */
+    initialize(): Promise<Result<void, AuthError>>;
+    authenticate(token: string): Promise<Result<AuthToken, AuthError>>;
+    getUserRoles(userId: string): Promise<Result<readonly Role[], AuthError>>;
+    getUserRepos(userId: string): Promise<Result<readonly string[], AuthError>>;
+    /**
+     * Validates a JWT (signature, expiry, audience, issuer) and returns the
+     * decoded `AuthToken`.
+     */
+    validateToken(token: string): Promise<Result<AuthToken, AuthError>>;
+    /**
+     * Fetches user info from the OIDC userinfo endpoint and caches it.
+     */
+    getUserInfo(token: string): Promise<Result<User, AuthError>>;
+    /**
+     * Maps OIDC claims / groups to CodeRAG roles.
+     *
+     * Checks `roles`, `groups` and `realm_access.roles` claims (covers Azure
+     * AD, Okta, Keycloak).  Falls back to `viewer` if no mapping matches.
+     */
+    mapRoles(claims: Readonly<Record<string, unknown>>): readonly Role[];
+    private verifySignature;
+}